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Abstract. We present an improved algorithm for tabulating class groups of 
imaginary quadratic fields of bounded discriminant. Our method uses classi¬ 
cal class number formulas involving theta-series to compute the group orders 
unconditionally for all A ^ 1 (mod 8). The group structure is resolved using 
the factorization of the group order. The 1 mod 8 case was handled using 
the methods of IJRW061 . including the batch verification method based on 
the Eichler-Selberg trace formula to remove dependence on the Extended Rie- 
mann Hypothesis. Our new method enabled us to extend the previous bound 
of | A| < 2 ■ 10 11 to 2 40 . Statistical data in support of a variety conjectures is 
presented, along with new examples of class groups with exotic structures. 


1. Introduction 

The class group of an imaginary quadratic field Q(\/A) with discriminant A, 
denoted by CIa, has been studied extensively over the past two centuries. Many 
things are known about the class group. For example, if we know the class number 
h( A), which is defined as the size of CIa, we can find a non-trivial factor of A. 
Also, from the prime factorization of A we can determine the parity of h( A), as 
well as the rank of the 2-Sylow subgroup of CIa- 

However, the number of open questions about CIa most certainly exceeds the 
number of answered. For example, computing the class number is believed to be 
computationally difficult; it is known to be at least as hard as integer factorization, 
and is currently harder. The heuristics of Cohen and Lenstra ICL84| allow us to 
make certain predictions regarding divisibility properties of h( A) and the structure 
of CIa, but most of these, especially with respect to odd primes, remain unproved. 
Another question of interest is to provide tight bounds on h{ A). This has been 
answered by Littlewood |Lit28| . but the result is conditional ; that is, it depends on 
the Extended Riemann Hypothesis (ERH). 

Due to the lack of unconditional proof on such basic arithmetic properties on 
CIa, it is of interest to provide numerical evidence supporting the heuristics and 
conditional results. Tabulating CIa for as many small discriminants as possible 
provides such evidence. The first major work on class group tabulation is due 
to Buell, who in a series of papers culminating in jBue99] . computed all CIa for 
negative A satisfying |A| < 2.2 • 10 9 . In his work, Buell gathered statistics on 


2010 Mathematics Subject Classification. Primary 11R29; Secondary 11R11, 11Y40. 

Key words and phrases, binary quadratic form, class group, tabulation, out-of-core multipli¬ 
cation, Cohen-Lenstra heuristics. 

The first author’s research was supported by “Alberta Innovates Technology Futures”, Canada. 
The second author’s research is supported by NSERC of Canada. 


1 


©XXXX American Mathematical Society 











2 


A. S. MOSUNOV AND M. J. JACOBSON, JR. 


Littlewood’s bounds on L( 1, xa) |Lit28j . Bach’s bound on the size of the generators 
required to produce Cl a Bac90] . and the Cohen-Lenstra heuristics jCL84j . He also 
provided a table of first occurrences of so-called “exotic” groups. These groups 
possess interesting group structures, such as non-cyclic p-Sylow subgroups for odd 
primes p , which according to the Cohen-Lenstra heuristics are quite rare. Such 
groups are of interest, for example, in the context of class field theory, as the towers 
of field extensions for them have interesting, non-trivial properties |Meyl2 


The next and also most recent work of interest is due to Jacobson et al. 


RW06I . 


who used a baby-step giant-step algorithm to tabulate all class groups to 10 11 
BJT971 Algorithm 4.1]. The bound was further extended to 2-10 11 in the Master’s 
thesis of Ramachandran [RamOfij . The authors used Bach’s averaging method in or¬ 
der to determine a conditional lower bound h* on h( A), such that h* < h{ A) < 2 h* 
Bac95j. Due to the nature of the baby-step giant-step algorithm, knowing this 
bound was sufficient to be certain that the whole group was generated, assuming 
the ERH. In order to eliminate the ERH dependency, they applied the Eic.hler- 
Selberg trace formula ]SvdV9l] . which relates sums of Hurwitz class numbers to 
the trace of a certain Hecke operator [JRW061 Formula 2.2]. Following Buell, the 
authors gathered statistics on various hypotheses regarding CIa- 

In this paper, we push the feasibility limit further by tabulating class groups for 
all negative A such that |A| < 2 40 = 1.09951... x 10 12 . Using certain class num¬ 
ber generating functions 11 Wat 351 . we were able to compute all class numbers h{ A) 
for A ^ 1 (mod 8) via a product of two large-degree power series; this method 
was inspired by that of Hart et al. to tabulate all congruent numbers to 10 12 
jHTWIO] . Computing the class numbers first allowed us to further achieve a signif¬ 
icant speedup in class group tabulation for these A by only resolving the structure 
of possibly non-cyclic subgroups, i.e., for which all prime divisors of the order occur 
with multiplicity greater than one. The discriminants A = 1 (mod 8) were handled 
separately using the previous technique of Jacobson et al. I.TRWOfij . In the end, we 
observed that the class groups with A ^ 1 (mod 8) were computed over 4.72 times 
faster than class groups with A = 1 (mod 8). 

Unfortunately, the improved running time did not come for free, as we were 
no longer able to test Bach’s bound on the size of generators required to produce 
the whole group [Bac90] . Nevertheless, we were still able to gather extensive com¬ 
putational evidence in support of Littlewood’s bounds (Lit28l . the Cohen-Lenstra 
heuristics ]CL84j . and Euler’s hypothesis on idoneal numbers [Kanll. . We also 
further extended Buell’s table of exotic groups Bue99 . 

Our paper is organized as follows. In Section [3] we present three formulas suit¬ 
able for the tabulation of class numbers h( A) with A ^ 1 (mod 8). Section 0] is 
dedicated to the out-of-core polynomial multiplication technique due to Hart et 
al. [HTWIO] . which allows to compute the product of two large polynomials that 
cannot fit into memory all together. Section [5] gives a brief overview of the tech¬ 
niques that were used in order to tabulate CIa for A = 1 (mod 8). Section [6] 
discusses the performance of our program. In Section 0 we present our numerical 
results, which include statistics on various hypotheses regarding CIa and the re¬ 
fined table of exotic groups. Section [8] concludes the paper by giving a discussion of 
various techniques, which can further accelerate the class number and class group 
tabulation. 
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2. Preliminaries 

Our method for computing the class numbers relies on classical results related 
to binary quadratic forms. Hence, our algorithms will be described in the language 
of forms, and we will use the fact that the ideal class group of the field Q(\/A) 
of discriminant A < 0 is isomorphic to the group of equivalence classes of binary 
quadratic forms of discriminant A. 

In particular, we consider binary quadratic forms from two different perspectives. 
We use (a, 6, c) to denote a modern binary quadratic form, i.e. form which possesses 
a discriminant A = b 2 — 4 ac. We also use (a, 26, c) to denote a classical binary 
quadratic form of determinant D = b 2 — ac, studied by Gaufi Gau861 Chapter 5]. 
In the first case, the set of equivalence classes with respect to invertible integral 
linear changes of variables forms a group under composition of forms. An analogous 
observation can be made regarding the set of properly primitive (to be defined) 
classical quadratic forms. In the first case, the class group of modern forms is 
isomorphic to the ideal class group of Q(\/A) whenever A is a field discriminant 
(square-free integer congruent to 1 mod 4 or 4 times a square-free number). The 
second case is closely related; as the formula (13.41) suggests, the resulting group 
order corresponding to determinant D differs from 6(A) by a factor of three if 
A = 5 (mod 8), A^-3 and is equal to 6(A) otherwise. 

We also require the following classifications of classical forms: 

Definition 2.1. [Gau861 §226] Consider a quadratic form (a, 26, c) and its divisor 
6 = gcd(a, 6, c). Then (a, 26, c) is called primitive if S = 1, and derived otherwise. 

Definition 2.2. [Kro60j A primitive quadratic form (a, 26, c) is called uneven if 
gcd(a, 26, c) = 1, i.e., its coefficients a and c are not both even; it is called even 
otherwise. A derived form of divisor S is uneven when (a/6, 26/6, c/6) is uneven; 
otherwise it is even. 

By F(n) and F\(ri) Kronecker denoted the total number of uneven and even 
equivalence classes of forms of determinant D = —n, respectively. We extend his 
notation by writing F(n) and F\{ri) for the total number of primitive uneven and 
even equivalence classes of determinant D = — n, respectively. Note that there 
exists a straightforward connection between F{n) and F(n), and between F\{n) 
and Fi(n). In particular, if we write n = g 2 e, where e is square-free, then 

(2.1) F(n)=£F(£) and F 1 (n) = ]TF 1 (£ 

t\g t\g 

To see this, observe that when gcd(a, 6, c) = t > 1, from every uneven primitive 
form (a/t, 2b/t, c/t ) of determinant — n/t 2 we can obtain every uneven derived form 
(a, 26, c) of determinant D = —n and divisor 6 = t. By counting all uneven primitive 
forms with all uneven derived ones, we obtain F(n). A similar reasoning allows us 
to deduce the formula for F\(n). 

3. Class Number Tabulation Formulas 

We begin by considering the following Jacobi theta series: 

OO 

- , x ^ V—> (u\l\ 2 _ 1 9. 25 49 

d 2 (q) = +2 = 2q* + 2q* + 2q * + 2q ■* + ... ; 

k =0 
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03 (g) = 1 + 2 9 fc2 = 1 + 2 9 + 2g 4 + 2q 9 + 2 q 16 + ... . 
k=l 

In 1860, Kronecker found the connection that exists between $3 (q) and classical 
quadratic forms. We summarize his result in Theorem ld.il 

Theorem 3.1 ( 4Kro60j 'l. Let F(n) and F\{n) count equivalence classes [(1, 2-0,1)] 
and [(2, 2-1,2)], and classes derived from them, as 1/2 and 1/3, respectively. Define 

E( 0) = 1/12, E(4n) = E(n) for n / 0, and E(n) = F(n) — F\{n) for n ^ 0 

(mod 4). Then 

OO 

(3.2) t>Uq) = 12 J2E(n)q n . 

n— 0 

Though not obvious at first sight, the formula (13.211 allows us to tabulate class 
numbers h( A). Recall Gaufi’s result that F(n) is a multiple of Fi(n) |Gau861 §256]: 

! F(n), when n = 7 (mod 8 ) or n = 3; 

F(n)/ 3, when n = 3 (mod 8 ) and n 7 ^ 3; 

0, when n ^ 3 (mod 4). 

We may now prove Theorem 13.21 which connects h{ A) to F(n), where A = —4n or 
A = — n, depending on the congruence class of A modulo 4. 


Theorem 3.2. For A < 0 the following relation holds: 

(3 4) h(A) = /^ n )’ when A =0,1,4 (mod 8 ) or A =-3; 

|^F(n)/3, when A = 5 (mod 8 ) and A / —3, 

where 


(3.5) 


-A/4, if A = 0 
-A, if A = 1 


(mod 4); 
(mod 4). 


Proof. Consider a primitive binary quadratic form (a, 26, c) of determinant D = — n, 
where n is positive. When D = 1 (mod 4) and (a, 26, c) is even, i.e. a, c are 
even and 6 is odd, this form can be transformed into a form (a/ 2 , 6 , c/ 2 ) with 
discriminant A = 1 (mod 4). This map is bijective, since every form (a, 6 , c) of 
discriminant A with odd 6 corresponds to a primitive even form (2a, 26, 2c) of 
determinant D. We conclude that h( A) = Fi(ri). When D ^ 1 (mod 4), there are 
no primitive even forms, and a primitive uneven form (a, 26, c) with determinant 
D already has a fundamental discriminant A = AD. There are no other forms 
(a, 6 , c) of discriminant A with gcd(a, 6 , c) = 1, besides those of determinant D , so 
h( A) = F(n). In the end, we obtain the relation (13.411 . □ 


According to Theorems 13.11 and 13.21 by cubing 0 3 (g) we can tabulate h( A) for 
every fundamental discriminant A, except for A = 1 (mod 8 ), because in this case 
we have F(n) = Fi(n) and thus E(n) = 0. 

Before proceeding further, recall the definition of a Hurwitz class number H(n). 

Definition 3.3. Let 


(3.6) 


I h(A), if A < —4; 
MA) = l 1/2, if A = -4; 

[l/3, if A = —3, 
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and consider negative A = f 2 Ai, where Ai is a fundamental discriminant. Then 

h( m = 

t\f 

is called the Hurwitz class number. 

In Theorem l3.2l we determined the connection that exists between h{ A) and the 
number of primitive uneven classes F(n). However, the formula (13.21) has F(n) 
instead of F(n ), which also take the derived uneven classes into account. In fact, 
it is not hard to prove that F(n) = F[n ) and F\(ri) = Fi(n) hold if and only if n 
is square-free. In order to establish this connection for an arbitrary n, we aim to 
prove Theorem l3.41 which relates F{n) to the Hurwitz class number H{n) or H(An), 
depending on the congruence class of n modulo 4. To the best of our knowledge, 
the formula m is not present in any literature available, though its statement for 
the special case of square-free n > 4 is well known and can be found, for example, 
in the monograph of Grosswald [Gro851 Chapter 4, Theorem 2]. 


Theorem 3.4. Let E( 

n) be as in 

Theorem 

O 

Then 



'l/12, 

when n = 

0 ; 




E(nf 4), 

when n = 

0 

(mod 4) and n/0 

(3.7) 

E{n) = < 

H(4n), 

when n = 

1,2 

(mod 4); 



2 H(n), 

when n = 

3 

(mod 8 ); 




when n = 

7 

(mod 8 ), 


where H(n ) denotes the Hurwitz class number. 


Proof. Consider the following two cases, corresponding to square-free values of n: 

(1) Let n = 1, 2 (mod 4). For n = 1, we can verify that the formula (13.71) gives 
us the correct result. For n ^ 1, from (13.31) we know that F\(n) = 0, and 
from (13.41) we know that h( A) = F(n ), where A = —4n according to the 
relation (13.51) . Therefore, E(n) = F(n) — F\(n ) = /i^(—4n); 

(2) Let n = 3 (mod 8 ). For n = 3, we can verify that the formula (13.71) gives 
us the correct result. For n/3, from (13.31) we know that F(n) = 3Fi(n), 
and from (EH) we know that h( A) = F\ (n), where A = — n according to 
the relation (13.51) . We obtain E{n) = F{n) — F\{n) = 2 huj(—n). 

Now, consider an arbitrary n = g 2 e, where e is square-free. If we now recall 
formulas from (EH), then by Definition 13.31 we obtain formulas for n = 1,2 (mod 4) 
and n = 3 (mod 8 ): 

*<«>=£ 

* I g 

(^) = H(in), if n = 1,2 (mod 4); 
t\g 

2 hu ( 7 ?) = 2Lf(n), if n = 3 (mod 8 ). 
t\g 

According to Theorem l3.4l by cubing # 3 (q) we can tabulate Hurwitz class num¬ 
bers H(n). However, the formula (13.21) is quite inefficient for our purposes, as we are 
interested in only fundamental discriminants A, which correspond to coefficients of 
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$ 3 ( 9 ) of the form 16fc + 4, 16fc + 8 , 8 fc + 3 and 8 fc + 7 for some non-negative inte¬ 
ger k. We expect to have around (3 /tt 2 )7V w 0.3047V fundamental discriminants, 
satisfying |A| < TV |Coh93l Section 5.10]. Fortunately, there exist three alternative 
formulas, namely (1.13), (1.12) and (1.14) of |Wat35] . which can be derived easily 
from (13.21) [Bel24j : 


OO 


(3.8) 

Y,F(M + 2 )q k = vV)tf 3 (g); 

k—0 

(3.9) 

00 

2^F(4/c + l)g fe = V( 5 2 )^(g); 


k—0 


(3.10) 

where 


J2F(8k + 3)q k = V 3 (g), 

k =0 


v(<?) = 8 


= r 2 HvV 


( fc +l ) 2 . n -i 


= E 


k =0 
fc(fc+i) 


= 1 + q + q 6 + q b + q 10 + ... 


fc=0 


In order to tabulate all class numbers corresponding to fundamental A ^ 1 (mod 8 ) 
and |A| < TV, it is sufficient to compute (13.81) and (13.91) to degrees |_A^/16J, and 
(I3.10|) to degree |_7V/ 8 J. This can be done by multiplying polynomials, obtained by 
truncating series on the right sides of the equations above to a specific degree. 

Although this idea of reducing the class number tabulation problem sounds good 
in theory, there are significant practical obstacles when large bounds on the discrim¬ 
inant are considered. In particular, the polynomials involved are too large to fit into 
computer memory, so we have to perform our multiplication out-of-core, i.e. with 
the usage of the hard disk. We discuss the out-of-core polynomial multiplication 
technique in Section [4] 


4. Out-of-Core Multiplication 

In order to compute h( A) for all fundamental discriminants A < 0, satisfying 
|A| < TV and A ^ 1 (mod 8 ), we aim to compute relations (13.81) . (13.91) and (13.101) 
to degrees [_AT/ 16J, |_TV/16J and [IV/ 8 J, respectively. 

In our computations, TV was chosen to be 2 40 . If we assume that each coefficient 
of some polynomial f(x) of degree [N/8 J fits into 4 bytes, then we would require 
512 GB to fit f(x) into memory. Hence, in order to store two polynomials, f(x) and 
g(x ), as well as the resulting polynomial h(x), we need 1.5 TB, not to mention that 
the Fast-Fourier Transform (FFT), which we use to multiply polynomials, requires 
a lot of memory for intermediate results. Such an intensive memory requirement 
forces us to perform polynomial multiplication out-of-core , i.e., with the usage of 
the hard disk. 

The first step is to reduce the degree of the polynomials to be multiplied. Fol¬ 
lowing Hart et al. IHTWlOl . we convert polynomials of large degree with small 
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coefficients into polynomials of small degree with large coefficients by utilizing Kro- 
necker substitution. Consider the polynomial 

f(x) = fo + fix + f 2 x 2 + ... + f N —iX N ~^ G Z[x\ 
of degree N — 1. Fix a bundling parameter B , dividing N, and let Nq = N/B. 
Then we can write f(x,y), satisfying /( x B ,x) = f(x), as follows: 

No —1 

f(x,y) = F n{y)x n = F Q {y) + F 1 {y)x + F 2 {y)x 2 + ... + F No ^i(y)x N °~ x , 

n= 0 

where 

Pn(y) = fnB + friB+W + ■ ■ • + /(n+l)S-l2/ S 1 - 

If all the coefficients of f(x) fit into s bits, we can bundle them by evaluating each 
F n (y) at 2 s , and obtain the following bundled polynomial F(x): 

N 0 -l 

(4.11) F{x)= Y, Fn(2 s )x n . 

n— 0 

While /( x) has coefficients of size s bits and degree IV — 1, the bundled polynomial 
F(x) has coefficients of size Bs bits and a smaller degree No — 1. Now, in order to 
perform a multiplication h(x) = f(x) x g(x), one has to bundle coefficients of g{x) 
with the same parameters B and s, and obtain a bundled polynomial G(x). The 
polynomial H(x) = F{x) x G{x), the coefficients of which fit into (2 B — l)s bits, 
will therefore embed information on coefficients of h{x). 

As a technical point, note that F[{x) is not a bundled polynomial of h{x). In 
order to extract the coefficients of h(x) = Yml=o ^kX k from H(x) = Ylnlo 1 H n x n , 
a simple computation reveals that the summands of h^ = 2J i=0 fig^-i with nB < 
k < nB + B — 2 occur in both H n - 1 and F[ n for some positive integer n. In fact, if 
we let F[ n = Xu=o ~ 2 where Bin" 1 are all positive, then hk = H +H < ^X k \ 

The only exceptions correspond to hk = H^ for k < B, and for h t B- 1 = 

for some integer t > 1. Nevertheless, it is a simple matter to recover the hk given 

H{x). 

At this point we have reduced the problem to a multiplication of smaller-degree 
polynomials, but with much larger coefficients. The next step is to reduce the 
coefficient sizes to the point that the polynomials involved can be fit into available 
memory. This is accomplished via many Number Theoretic Transforms (NTT) with 
Chinese Remainder Theorem (CRT) reconstitutiorQ. The idea is simple: in order 
to multiply two bundled polynomials F(x) and G{x) with large coefficients, one 
chooses n many primes po, ■ ■ ■ ,p n - i, and performs reduction of coefficients of F(x) 
and G(x) modulo each p,; for 0 < i < n using a remainder tree |BM74j . After that, 
n pairs of polynomials are multiplied (possibly in parallel) over each finite field F Pi , 
and as a result, each polynomial will contain residues of H(x) = F{x) x G(x) modulo 
Pi. In the end, the coefficients of H(x) can be reconstructed with the Chinese 
Remainder Theorem, and this procedure can also be easily parallelized. Note that 
the intermediate results, namely reduced polynomials and the result of polynomial 
multiplications, are stored in m files on the hard disk. We observed that the choice 
of the number of files does not affect the performance of our program, and suggest 

1 Tlie paper of Hart contains a good survey on various out-of-core FFT methods and their 

applications IHTWlOl Section 3]. 
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to set to to be an integer multiple of number of threads used for computations. In 
our computations, we used 64 threads and produced to = 2 12 = 4096 files for each 
congruence class of A. With this choice of to, each file contains at most 10.3 million 
class groups, providing a reasonable balance between file size and total number of 
files. 

In order for the technique described previously to work one has to know ahead an 
upper bound C on coefficients of h(x), and choose primes such that C < JX" =0 Pi- 
Depending on the amount of memory available, each pi is chosen in such a way that 
the reduced polynomials in F Pi [a:] can be comfortably multiplied in main memory. 


4.1. Computational Parameters. The choices of a bundling parameter B and 
number of CRT primes can be optimized based on the amount of computer memory 
available. In order to make a proper choice of the bit size parameter s, we need to 
know how many bits are required to represent coefficients of (13.811 , (13.911 and (13.101) . 
In other words, we need to determine an explicit, unconditional upper bound on 
H{n). To this end, consider the analytic class number formula 

1 _ °° 1 / A \ 

M A ) = where L( 1,Xa) = Y] — ( — ) , 

7r m \ m J 

m =1 ' ' 

h u ( A) is defined in (13.61) . and (—) is the Dirichlet symbol. To find the bit size of 
h( A), we utilize Ramare’s unconditional bound on L(1, \a) (RamOlj : 

(4.12) R(1,Xa) < a log | A| +b, 


where 

a=|,fr=f- i2 § 1 , if A = 0 (mod 4); 
a = |, b = | — log 6, if A = 1 (mod 4). 

We may now apply Ramare’s bounds (14.121) to determine an upper bound on H(n ) 
for every n < N of the form n = g 2 e, where e is square-free: 

H ( n ) ^ ^ + b ) < ^Ai(alog|A| + &)5^. 

t I 9 ' 4 I 9 


To estimate the sum \ g j for N = 2 40 , we picked the largest possible g = 605395, 
and found the integer n = 554400 that does not exceed g, which has the largest 
value of | „ \ = W' Then ’ for 


(4.13) 


C N = 


1209 

"275" 


• -Vn(, 


a log N + b) 


where N < 2 


40 


and a and b as in (14.121) . we have that H(n) < Cn for all n < N. 

Now we can explain how to compute the bit size parameter s. Recall that the 
main class number tabulation formulas (13.81) . (13.91) and (13.101) require Cn, 2Cn 
and 3 Cn as their upper bounds, respectively. Considering this, the formula for s is 
given as 


(4.14) 


riog 2 CWl, for (ELI]); 

s = < |4og 2 (2CAr)~|, for (13.91) : where N < 2 40 . 
I flog 2 (3C'j V )l, for (13.101) . 


Finally, we need to determine how many primes to choose with respect to the 
bundling parameter B in order to restore coefficients of H(x) = F(x) x G(x), which 

















UNCONDITIONAL CLASS GROUP TABULATION TO 2' 


9 


40 


all fit into s bits. Recall that each coefficient of H(x) has size (2 B — l)s. In order 
to restore coefficients of H ( x ) with the CRT algorithm, we need to pick the primes 
Po, ■ ■ ■ ,Pn -1 so that (2 B — l)s < log 2 (po • ■ • ■ • Pn- 1 ). In our implementation, we 
chose the smallest prime po exceeding some positive lower bound P, and n — 1 
primes pi,. ■ ■ ,p n -i, which consecutively follow after p o. We choose n so that 

n— 1 

(2 B — l)s < nlog 2 po < E log 2 Pi , 

i=0 


i.e. 

(4.15) 


(2B — l)s 
log 2 Po 


Note that for large po and small n, the difference between n log 2 po and XuE l°g 2 Pi 
becomes negligible. Following Hart et al. jHTWIO) . we chose po to be the smallest 
prime exceeding P = 2 62 , which fits into a single machine word on a 64-bit system. 


4.2. Complexity Analysis. Before proceeding to the complexity analysis, we first 
summarize the process of computation of h(x) = f(x) x g(x). Given two polyno¬ 
mials, f(x) and g{x), both of degree N — 1, the bundling parameter B (which for 
convenience divides TV), the bit size parameter s, and n primes po,... ,p n - i, we 
compute the product of two polynomials in five stages: 

(1) Compute the bundled polynomials F(x) and G(x) of f(x) and g(x), respec¬ 
tively, using Kronecker substitution; 

(2) Reduce the coefficients of F(x) and G(x) modulo primes po, ■ ■ ■ ,p n -i us¬ 
ing the remainder tree |BM74l in order to obtain the reduced polynomials 
F Pi (x) and G Pi (x) in F Pi [x] for 0 < i < n\ 

(3) Compute H Pi (x) = F Pi (x) x G Pi (x) in [x] for each 0 < i < n\ 

(4) Compute H(x) (which is equal to F(x) x G(x)) by reconstructing its coef¬ 
ficients from H po (x ),..., H Pn l (x ) with the CRT algorithm; 

(5) Extract the coefficients of h(x) = f(x) x g(x) from H(x). 

The pseudocode of this algorithm can be found in the original paper of Hart 
et al. TtTWIOl Section 4.1]. Note that their algorithm corresponds to the case 
s = 16. The generalized version of the algorithm for an arbitrary positive integer 
s can be found in | IMosl4al Section 4.2]. In Theorem 14. 11 we give the asymptotic 
bit-complexity of this algorithm as a function of the polynomial degree (N) and 
the bundling and bit size parameters. 


Theorem 4.1. Consider two polynomials, f(x) and g(x), both of degree N — 1, 
whose coefficients can be initialized in O(N) bit operations. Using the technique 
described above, the product h{x) = f(x) x g(x) can be computed in 


(4.16) 


O 


(log(Hs)) 2+e + Ns 



bit operations, where B is the bundling parameter, and s is the bit size parameter. 


Proof. We analyze each of the five stages of the algorithm. The computation of 
bundled polynomials F{x) and G(x) in stage (1) consists of sequential applica¬ 
tions of logical shifts and ORs, and requires 0{N) bit operations. Each bundled 
polynomial has N/B coefficients, so the multimodular reduction phase (2) requires 
N/B reductions modulo n primes po,... ,p n - 1 - We use a remainder tree to reduce 
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each coefficient C of a bundled polynomial modulo po, ■ ■ ■ ,p n -1 - This technique 
allows us to compute C mod po, C mod p \,..., C mod p n -i in O (t (logf) 2+£ ^ bit 

operations, where t is the total number of bits in C,po,... ,p n - 1 [BM741 Section 3]. 
Since each coefficient of a bundled polynomial fits into Bs bits, we conclude that 
the multimodular reduction phase requires 

°{^' t ( lo g*) 2+£ ) = ° (^ ' Bs ( l °g( Bs )f +£ ^) = ° ( Ns (} 0 s( Bs )f +£ ) ■ 

bit operations. 

In stage (3), the multiplication of n pairs of polynomials of degree N/B — 1 is 
performed with the Schonhage-Strassen algorithm [ IGG031 Sections 8.2 - 8.4]. This 
algorithm requires 0(N log N log log N) bit operations to multiply two polynomials 
of degree N. Hence, stage (3) requires 

/ N N N\ ( N N N\ ( ( N\ l+e \ 

° \ n l3 log ^ loglog 5 J = ° [ Bs ^ lo &^ lo S^og— I = O I Ns (log— J I 

bit operations. 

Finally, consider stages (4) and (5), i.e., the CRT reconstitution and extrac¬ 
tion of coefficients. Though the latter involves certain sophisticated techniques, it 
simply iterates over all N coefficients of the resulting polynomial H(x), and there¬ 
fore requires O(N) bit operations. Now, consider the CRT reconstitution in stage 
(4). For the CRT, we use the divide-and-conquer technique (HTWIO I. Section 4]. 
For m integer coefficients of size ri 2 bits, this approach allows us to complete the 
restoration of a coefficient in O (ri 2 (log(niri 2 )) 2+e ^ bit operations. In our case, 712 

is constant and n\ = n, where n is the number of primes in use. In total, there 

are N/B coefficients to restore, which means that the number of bit operations 
required is in 

O ^(logn) 2+£ ^ = O (log {Bs)) 2+e ^j . 

Since s > log -1 B , the asymptotic running time of the initialization phase dom¬ 
inates the running time for the CRT reconstitution phase. Combining the costs for 
the initialization and multiplication phases yields the result (14.161) . □ 


Note that the class number tabulation formulas (13.81) . (13.91) and (13.101) require two 
polynomial multiplications. For example, in order to determine (13.101) . we first have 
to perform the multiplication V 2 (g) = V(<?) x V(g), followed by the computation of 
V 3 (q) = V 2 (g) xV(g). In practice, we use a different approach; that is, we initialize 
i ? 2 (q) (or V 2 (q), or V 2 (q 2 )) directly, which allows us to evaluate the formula using 
one polynomial multiplication instead of two. 

We describe the initialization mechanism for the example of $3 (q). A similar 
approach can be used to initialize V(g) and V(g 2 ). We compute the first N coef¬ 
ficients of $3 (q) block by block, using a certain partition size S dividing N. The 
initialization algorithm for the block of S coefficients from M to M + S — 1 requires 

y/M + S — VS^ perfect squares 
between M and M + S — 1; we can easily iterate over all of them within a single 
loop. Summing over N/S blocks, we obtain that the initialization of N coefficients 


0(y/M + S) bit operations, as there are precisely 
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of $ 3 (g) requires 0(y/S) + 0(y/2S) + ... + 0{sfN) = 0(Ny/N/S) bit operations. 
In order to achieve a linear time for initialization, we choose S = 0(y/N). 

In turn, the initialization of a block of coefficients of d 2 {q) requires two nested 
loops, which result in O(S) bit operations. Summing O(S) + 0(2S) +... + 0(N) = 
0(N 2 /S), we conclude that S has to grow proportionally to N/(\ogN) k for some 
non-negative integer k in order for d 2 (q) to be initialized in linear or pseudo-linear 
time. Of course, this is unreasonable. However, for small N, initializing d 2 (q) 
directly works well in practice, even though it is worse asymptotically than using 
two sequential polynomial multiplications. 

We now state the asymptotic complexity of the complete class number tabula¬ 
tion method without including the initialization costs of i9§(g), V 2 (g) or V 2 (g 2 ) 
mentioned above. We obtain Corollary 14.21 bv applying the formula for s in (14.141) 
to Theorem 14.11 

Corollary 4.2. 

(4.17) 

bit operations. 

In theory, all steps of the algorithm can be parallelized trivially, yielding a speed¬ 
up of T using T threads — see [Mosl4al Chapter 4] for a complete description 
and analysis. In practice, such optimal speedup is difficult to achieve due to the 
cost of managing the threads and the assumption that all disk I/O is being done 
in parallel, both reading and writing. Special hard disks designed for large-scale 
parallel applications, such as those used in our experiments, are necessary to get 
the most out of parallelization. 

The method described by Ramachandran et. al. | JRW06, IRam06] has bit com¬ 
plexity 0( |A| 1//4+e ) for each discriminant, and thus 0(N 5 / 4+e ) for all |A| < N, 
including the ERH-verification step. Our new algorithm computes the class num¬ 
bers asymptotically faster, but we can only use it for A ^ 1 (mod 8 ) and require 
a more expensive method for the remaining congruence class. In addition, Ra- 
machandran’s method also computes the class group structures. We describe our 
approach to this part of the problem in the next section. 

5. Unconditional Class Group Tabulation 

The class number tabulation technique, described in Sections [3] and IH allows 
us to compute unconditionally all class numbers h( A) with A ^ 1 (mod 8 ) and 
|A| < N. To resolve the structure of each class group Cl a, we use the algorithm 
due to Buchmann, Jacobson, and Teske (BJT) IBJT971 . Algorithm 4.1], suitable for 
any generic group G. This algorithm iteratively builds up the set of generators a. of 
G, and terminates whenever the size of the subgroup (a) generated by a matches 
|G|. 

Note that tabulating class numbers for A ^ 1 (mod 8 ) has another major ad¬ 
vantage, aside from the fact that we were able to produce the size of each CIa 
unconditionally and did not require an additional verification step. Given the fac¬ 
torization of h( A) = p^ 1 ■ p^ 2 ■ ■ p*j. k , we can ignore those primes pi for 1 < i < k 

which have e, = 1 , as it means that the pi-group of CIa is guaranteed to be cyclic. 


The class number tabulation algorithm requires 


O ( N log A(log B) 2+e + N log N | log — 


N 


1+e > 
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We can therefore resolve the structure of a smaller subgroup G of Cl a, satisfying 

\g\= n pv- 

P?|h(A) 


In practice, |G| was much smaller than h( A) frequently, so this method worked 
very well. 

For A = 1 (mod 8), where our tabulation method does not produce any class 
numbers, we used the same method as in [.TRWOfi] . The Buchmann-Jacobson- 
Teske algorithm can still be used to compute class groups without knowing the 
class numbers a priori. In this case, it is sufficient to provide a lower bound h* such 
that h* < h( A) < 2 h* in order to be certain that the whole group was generated 

once the size of the subgroup (a) generated by a exceeds h*, we know that we 
have the entire group. 

As described in [ JRW06] , the main issue with this approach is that the best 
method to determine the lower bound h* requires the ERH-dependent averaging 
method of Bach [Bac90l . To eliminate the ERH dependency, we again followed 
IIJRW06] and applied the Eichler-Selberg trace formula. This formula gives an 
expression for the trace of the Hecke operator T n acting on the space of cusp forms 
Sk(To(N),x)- When applied to the case where k = 2, N = 1, and % the trivial 
character, the trace formula reduces to the following equality involving Hurwitz 
class numbers: 


[%/4nJ 

(5.18) ff(4?z) + 2 ff(4n-f 2 ) = 2 


t= 1 


E d 

d\n 

\d>y/n / 


- a(n)y/n + ~x(n), 
6 


where u(n) is the indicator function, which is 1 whenever n is a perfect square and 
0 otherwise lJRW06t Formula 2.2]. Due to the nature of the BJT algorithm, the 
size of the class group computed will always divide h( A). Therefore, if one or more 
of our computed class numbers are wrong, then (15.181) will detect this because the 
left hand side will be less than the right hand side. Note that in our case the only 
class numbers h( A) that require verification are those with A=1 (mod 8), so it is 
sufficient in our case to verify that the equality (15.181) holds only for even values of 
n. 

One method to use (15.181) to verify all h(Ai) with Ai fundamental and |AjJ < N , 
as suggested in j JRW06] . is to first compute the smallest set of n values such that 
every fundamental discriminant Ai divides at least one Hurwitz class number in the 
formula. However, a more efficient approach was later suggested by Ramachandran 
|Ram06] , based on simplifying the computation of (15.181) for all values of n between 
1 and [N/ 4J. 

Following Ramachandran |IRam061 Formulas 4.10, 4.11], but adjusting for the 
fact that we only need to verify discriminants congruent to 1 mod 8, we define two 
quantities, LHS and RHS , as follows: 


(5.19) LHS = 


\ 


E ^(i A i) 


A=0 (mod 8) 
v |A|<8X 




\ 


E r(A,X)if(|A|) 


A=0,1 (mod 4) 
|A|<8A 


/ 
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(5.20) 


x 


RHS = Yl 


( 


\ 


E * 

d | 2 n 

\ d > y / 2 n J 


- x(2n)\/2n+ E(2n) 
0 


\ 




Here, r(A,X) counts the number of solutions to the equation A = 
1 <n< X: 


t 2 — 8 n for 


(5.21) 


r( A,X) 


0 , 


LT + i)/2J, 

LT + 2)/4j, 

IT/ 4J, 


if A = 5 (mod 8); 
if A = 1 (mod 8); 
if A = 4 (mod 8); 
if A = 0 (mod 8), 


where Y = [a/8 X + AJ. We computed both LHS and RHS in parallel for 
X = L-/V/8J, where N = 2 40 . The expression LHS is evaluated using the table 
of class numbers of fundamental discriminants computed using the BJT method; 
see IRam06l Algorithm 4.1] for pseudocode. Though computationally more inten¬ 
sive, the calculation of the RHS is more straightforward and easily parallelizable. 
In order to compute the divisors for each n < X, we use the formula (15.2011 in 
conjunction with a segmented sieve. 


6. Performance 

For the class number tabulation using out-of-core polynomial multiplication, 
we used the FLINT library for number theory, maintained by Hart IHarl4) . In 
particular, we used the nmod_poly_mullow routine for polynomial multiplication 
in F p [x\. The FLINT library also contains subroutines for fast reduction modulo 
primes po ,... ,p n -i and CRT reconstitution, respectively. We used OpenMP for 
parallelization. 

For the class group computation, we used Sayles’s libraries optarith and qf orm, 
which contain fast implementations of binary quadratic form arithmetic |Sayl3a[ 
|Sayl3b| , including implementations targeted to machine-size operands that avoid 
multi-precision integer arithmetic. We also use Message Passing Interface (MPI) 
for parallelization. The source code for our program can be found in |Mosl4b| . 

Our computations were performed on WestGrid’s supercomputer Hungabee, lo¬ 
cated at the University of Alberta, Canada |Wesl4j . Hungabee is a 16 TB shared 
memory system with 2048 Intel Xeon cores, 2.67GHz each. Each user of Hungabee 
may request at most 8 GB of memory per core. Also, Hungabee provides a high 
performance 53 TB storage space, which allows to write to multiple disks in paral¬ 
lel. Note that the fast disk I/O requirement is essential for the high performance 
of our program. 

We first discuss our class number tabulation program. We performed three poly¬ 
nomial multiplications, described in formulas (13.81) . (13.91) and (13.101) . After running 
several tests, we determined that Hungabee can comfortably multiply polynomials 
of 2 25 coefficients without requiring additional memory. This observation allowed 
us to make the proper choice of a bundling parameter B. 

Table Q] contains the list of parameters which we used for our computations, and 
the amount of disk space needed to store intermediate computations required for 
the polynomial multiplication. Here, C is the bound on iJ(|A|) defined in (14.131) . 
s is the bit size parameter (14.141) . and n is the number of 63-bit primes required 
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Table 1. Computational parameters 


Formula 

A 

N 

B 

C 

s 

n 

Disk space 

V\q z )-dz(q) 

8 (mod 16) 

2 36 

2 11 

11199314 

24 

1586 

859 GB 


12 (mod 16) 

2 3ti 

2 n 

11199314 

25 

1652 

893.4 GB 

V^q)-\7(q) 

5 (mod 8) 

2 3 7 

2 12 

21381515 

26 

3435 

1855 GB 


for correct CRT reconstitution (14.151) . For each multiplication, we requested 64 
processors and 8 GB of memory per core. The number of files was chosen to be 
m = 4096. Table [2] lists timings for each of the three class number tabulation 
algorithms. 


Table 2. Timings for the class number tabulation program 


/(*) 

a(x) 

CPU time 

Real time 

V\q') 

$3 (q) 

23d llh 10m 56s 

8h 47m 59s 

n{q) 

V(«") 

29d 2111 2m 56s 

llh 12m 14s 

v*(«) 

V(g) 

68d 5h 8m 16s 

25h 34m 49s 


Table [3] contains timings for computing the class group structures. As expected, 
for A = 1 (mod 8) our program takes significantly more time, since Ramaclian- 
dran’s approach requires the computation of the whole group. If we assume that 
all A were handled using solely Ramacliandran’s technique, then 64 processors 
would complete the (conditional) tabulation to 2 40 in 80d llh 9m 48s, as opposed 
to 31d 22h 45m 8s (counting the class number tabulation and the verification). 
Note that 81.13% of time in our computations was spent on the computation of 
CIa for A = 1 (mod 8) and the verification of the result. 

Table 3. Timings for the class group tabulation program 


A 

CPU time 

Real time 

# processors 

A ^ 1 (mod 8) 

267d 4h 31m 40s 

4d 3h 26m 44s 

64 

A = 1 (mod 8) 

1657d 22h 12m 6s 

39h 28m 27s 

1008 


We also observe that the structures of CIa for all congruence classes with A ^ 1 
(mod 8) were computed over 6.25 times faster than those with A = 1 (mod 8). If we 
include the verification cost for the 1 mod 8 case and the class number tabulation 
for the rest, then the entire computation for all A ^ 1 (mod 8) is roughly 4.72 
times faster than that for 1 mod 8. Such a significant speedup occurs due to the 
fact that in 57.34% of the cases h( A) had a square-free factor exceeding y/h{ A), 
which means that the size of the subgroup that we had to resolve was small relative 
to the size of the group itself. Moreover, in 1.67% of the cases h( A) were square- 
free, which means that no resolution of class groups was needed at all. In general, 
over 85.13% of class numbers h( A) possessed a square-free part larger than 1. In 
Tabled! we present the counts of class numbers up to 2 40 with various divisibility 
properties. In particular, column 3 counts class numbers with square-free part 
greater than 1, column 4 counts h( A) with square-free part exceeding y/h{ A), and 
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Table 4. Counts of h( A) with various divisibility properties 


A 

Total A 

P1 h, p 2 | h 

h = g 2 e , e > \fh 

square-free h 

8 (mod 16) 

55701909754 

47077629143 

32012088117 

941347842 

12 (mod 16) 

55701909855 

47091713960 

31927265003 

915383075 

5 (mod 8) 

111403819688 

95517292502 

63828635213 

8828052571 

1 (mod 8) 

111403819373 

94502061670 

55851403024 

7295483368 


column 5 counts class numbers that are square-free. Our data is separated into 
four congruence classes. 

Note that the counts for A = 1 (mod 8) were not included in the percentages 
listed above. The counts are similar to the other congruence classes, but divisibility 
properties of the class number played no role in the computation for the 1 mod 8 
case as the class numbers were not computed first. It should be emphasized that 
the rapid computation of all class numbers using theta-series is what allowed us to 
take advantage of these properties when resolving the group structures. 

Finally, we compare the performance of our program to the implementation 
of Ramanchandran [RamOfi] . and the quadclassunitO routine of the PARI/GP 
library |i Par!4j . For the class group resolution, the latter implementation uses 
Hafner and McCurley’s subexponential index calculus algorithm |McC89l IHMcC89] . 
For each implementation, we used a single Intel Xeon 2.27GHz processor to compute 
Cl a for every fundamental A < 0 such that |A| lies in the interval from 2 39 to 
2 39 + 2 20 . For this computation, we used the ERH-dependent version of the BJT 
algorithm for our implementation and that of Ramachandran (i.e., no prior class 
number tabulation nor verification in either case). The resulting timings are listed 
in Table [5j 

Table 5. Timings for various class group tabulation implementations 


| A min | 

| A max | 

Total A 

Our program 

Ram 06 PARI/GP 

2 39 

2 39 + 2 2u 

318729 

438s 

736s 1181s 


All three implementations yield correct results under the assumption of the ERH. 
Though our program and Ramachandran’s implementation implementation use the 
same algorithm, it significantly outperforms the latter. We believe that the opti¬ 
mized binary quadratic form arithmetic in Sayles’s libraries optarith and qform 
|Sayl3a[ |Sayl3b| used in our program accounts for the improvement. 

Note that asymptotically the Hafner-McCurley algorithm (with subexponential 
complexity in log |A|) is superior to the BJT algorithm (exponential complexity). 
Thus, although it should be faster for a sufficiently large discriminant bound, our 
results show that the bound 2 40 is still below the crossover point. 

7. Numerical Results 

7.1. Bounds on L(l, ,\a)- In 1928, Littlewood |Lit28| demonstrated that, assum¬ 
ing the ERH, 

(7.22) (1 + o(l))(ciloglog|A|)~ 1 < 1/(1,xa) < (1 + o(l))c 2 loglog|A|, 
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where 

12 e 7 

ci = — 7T- and C 2 = 2e 7 when 2 \ A; 

7T^ 

8 e 7 

Ci = —— and C 2 = e 7 when 2 I A, 

7T 2 

and 7 ss 0.57722 is the Euler-Mascheroni constant. Later, Shanks studied these 
bounds more carefully by defining two quantities, 

ULI= L ^ 1 \ XA \ l and LLI = L(l, xa)cj log log | A|, 
c 2 log log I A| 

and ignoring o(l) term in Littlewood’s estimates |Sha73j . These quantities allow 
us to test whether Littlewood’s bounds are violated, for if the ERH does not hold, 
then for large |A| we might find ULI > 1 or LLI < 1. Note that there are small 
A such that ULI > 1 or LLI < 1, namely A = —3,—4,—163. We assume that 
values of ULI and LLI for these discriminants are largely influenced by o(l) terms. 
Aside from A = —3,—4,—163, we did not find any occurrences of discriminants 
which violate Littlewood’s bounds. Ignoring these A, the largest ULI ss 0.85183 
corresponds to A = — 8 , and the smallest LLI ss 1.00944 corresponds to A = —232. 

In addition to Littlewood’s bounds, we also studied the growth of L( 1,xa)- 
In Table [ 6 l we list successive maximas of L( 1,xa) which did not occur in Table 
5.3 of )Ram06] . The last discriminant found was A = —685122125399, which 
corresponds to the largest L( 1,xa) ~ 8.47178 with |A| < 2 40 . As for successive 
minimas of L(1,\a)> n o new discoveries were made. The smallest L(1, \a) ~ 
0.17070 corresponds to A = —107415709003. 

Table 6. Successive L(1,xa) maxima 


|A| 

L( 1,X'a) 

ULI 

210015218111 

8.26604 

0.71164 

332323080311 

8.30989 

0.71161 

503494619759 

8.31253 

0.70848 

603231310919 

8.32466 

0.70807 

685122125399 

8.47178 

0.71957 


7.2. The Cohen-Lenstra Heuristics. In 1984, Cohen and Lenstra presented sev¬ 
eral powerful heuristics on the structure of the odd part of the class group CIa 
|CL84| . The odd part Cl\ is simply the largest subgroup of CIa with an odd 
cardinality. 


Conjecture 7.1 ( [CL841 Cl]). Define 


i=i 


*(o=nu-* and c ' 


Ha*) ~ 2.294856589, 

i=2 


where £(s) denotes the Riemann zeta function. For A < 0, the probability that the 
odd part of the class group CIa is cyclic is 


(7.23) 


Pi-(C7a is cyclic) 


315C(3) 

6'7t 4 ?7 00 (2)Coo 


0.977575. 
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Conjecture 7.2 ( ICL84[ C2]). Let l be an odd prime. For A < 0, the probability 
that l divides h{ A) is 

(7.24) Pr(Z|/i(A)) = 1-^(0- 

Conjecture 7.3 i |CL84[ C5]). Let l be an odd prime. For A < 0, the probability 
that the l-rank of Cl a is equal to r is 

(7.25) Pr((-ra„k = r) = 


In order to study these conjectures, we follow the approach of Jacobson et al. 
and introduce three functions: c(x), pi{x) and pi, r (x) |JRW061 Section 3.2]: 


c{x) 


# of Cl A cyclic with |A| < x 
# of A with | A | < x 


/ Pr (Cl A is cyclic); 


Pl(x) 


# of h{ A) divisible by l with |A| < x 
# of A with |A| < x 


/ Pr(Z | h(A)); 


Pl,r{x ) 


# of Cl a with Frank = r and |A| < x 
# of A with |A| < x 


/ Pr (Frank 


r). 


If the Cohen-Lenstra heuristics hold, we would expect each of those functions 
to approach 1 as i grows. We observe this behavior in Figures |T] and [2j which 
plot pi(x) and Pi,i(x) for l = 3, 5, 7, respectively. The values of c(x), as well as the 
counts of non-cyclic Cl'* A , are presented in TableO Note that our counts differ from 
the ones given in [ JRW06„ Table 3]. For example, the total number of non-cyclic 
Cl* A for | A | < 10 11 given in [JRW061 Table 3] is 603101904, whereas our count in 
Table □ suggests that this number is 636501087. In general, our counts are over 
1.044 times larger than the counts given in 1.1 HW061 Table 3]; this ratio grows with 
x and reaches 1.055 for x = 10 11 . We argue that values in Table [T] are correct, 
because the output of algorithms for small N < 10 9 matches that of PARI/GP 
[Par 141 . Finally, in Tables [ 8 ] and [5] we count the total number of h( A) divisible by 
a prime l, and class groups with a certain Frank. 


Table 7. Number of noncyclic odd parts of class groups 


X 

Total 

Non-cyclic 

Percent 

c(x) 

10 n 

30396355052 

636501087 

2.09400 

1.00152 

2 - 10 11 

60792710179 

1283029629 

2.11050 

1.00135 

O 

i — 1 

CO 

91189065248 

1932535723 

2.11926 

1.00126 

4-10 11 

121585420327 

2583844783 

2.12513 

1.00120 

5-10 11 

151981775550 

3236429002 

2.12948 

1.00116 

O 

T - 1 

CO 

182378130683 

3889995513 

2.13293 

1.00112 

o 

I — 1 

212774486110 

4544337515 

2.13575 

1.00109 

o 

I — 1 

00 

243170840635 

5199342505 

2.13814 

1.00107 

o 

I — 1 

273567195607 

5854902775 

2.14021 

1.00105 

10 12 

303963550712 

6510933430 

2.14201 

1.00103 

to 

o 

334211458670 

7164219493 

2.14362 

1.00101 
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Figure 1. Values of pi (x) 



Figure 2. Values of pi ^ (x) 



7.3. First Occurrences of Non-cyclic p-Sylow Subgroups. During our com¬ 
putations, we also looked at the problem of finding Cl a with the smallest | A| which 
corresponds to a certain p-group structure. This question was explored by Buell in 
[Bue99], where he tabulated the first occurrences of what he called “exotic” groups. 
He gave a list of first even and odd A, as well as the total number of them up to 
2.2 • 10 9 . This list was extended by Ramachandran to 2 • 10 11 (Ram06j . In Tables 
0311 HU and [12] we further extend Ramachandran’s results by listing first occurrences 
of class groups that are not present in Tables 5.13, 5.15 and 5.17 of IRam06| . Pre¬ 
viously unknown minimal discriminants whose class groups have a variety of exotic 
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Table 8. Counts of class numbers divisible by l 


X 

3 1 h 

5 h 

7 1 h 

11 1 h 

13 1 h 

10 n 

13206088529 

7271547905 

4956628127 

3011896994 

2516050182 

2 • 10 11 

26447989308 

14547903930 

9914941601 

6025009729 

5032948550 

O 

t — 1 

CO 

39700741936 

21825546084 

14873726078 

9038458883 

7550137579 

4-10 11 

52959934649 

29103662856 

19832681021 

12052003780 

10067454468 

5 • 10 11 

66223739128 

36382211005 

24791661364 

15065606774 

12584840703 

6 • 10 11 

79491008890 

43661126382 

29750874514 

18079320114 

15102137499 

O 

^ —1 

i>- 

92761033879 

50940277442 

34710302571 

21092999797 

17619561852 

o 

i —i 

00 

106033521908 

58219944093 

39669843978 

24106720004 

20137035912 

9 ■ 10 11 

119308020675 

65499671827 

44629193028 

27120432707 

22654498276 

To 12- 

132584350621 

72779583545 

49588756987 

30134192653 

25171929972 

to 

4- 

o 

145797270882 

80023955398 

54524158518 

33133247297 

27677104824 


Table 9. Counts of class groups with Z-rank = r 


X 

1 = 3 

r = 2 

l = 5 

l = 7 

1 = 3 

r = 3 

/ = 5 

l = 7 

10 n 

554992183 

61905528 

14909598 

1891327 

19701 

824 

2 - 10 11 

1119549000 

124086783 

29864434 

3941440 

39455 

1699 

3-10 11 

1686937952 

186346310 

44837690 

6041677 

59455 

2555 

4-10 11 

2256067209 

248638170 

59813385 

8170672 

79056 

3392 

5-10 11 

2826419025 

310963856 

74791724 

10319592 

99020 

4302 

6 -10 11 

3397716149 

373303706 

89772515 

12486498 

119058 

5158 

7-10 11 

3969781768 

435637308 

104762170 

14667860 

138969 

6050 

O 

i—1 

00 

4542454057 

498010970 

119754407 

16861780 

158992 

6949 

9-10 11 

5115675246 

560398913 

134735076 

19064061 

179000 

7804 

To 12- 

5689326792 

622806579 

149727575 

21274374 

199005 

8677 


6260628955 

684906543 

164647966 

23481723 

218977 

9586 


structures were discovered, including A = —824746962451 which is the smallest 
discriminant in absolute value with 17-rank equal to three. 

We also looked at the first occurrences of doubly and trebly non-cyclic class 
groups. One of the most interesting discoveries is A = —658234953151 with Cl\ = 
C(5 ■ 7 • 17) x <7(5 • 7 • 17), where C(x) denotes the cyclic group of order x. In Tables 
m and m we list first occurrences of doubly and trebly non-cyclic p-groups that 
are not present in Tables 5.18 and 5.19 of [Ram06j . 

The complete tables with all frequency counts for discriminants satisfying | A| < 2 40 
can be found in JMosl4aj . The data is soon to appear online on The L-functions 
and Modular Forms Database [LMFDBl . 

Table 10. Non-cyclic rank 2 p-Sylow subgroups 


P 

ei 

e-2 

First even |A| 

# even A 

First odd A 

# odd A 

3 

7 

5 

* 

* 

253237383431 

2 

3 

8 

4 

* 

* 

225796561799 

10 
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Table 10 - continued from previous page 


p 

ei 

e-i 

First even |A| 

# even A 

First odd A 

# odd A 

3 

m 

m 

1018482429656 

2 

65798421911 

908 

3 

m 

□ 

* 

* 

766483839959 

2 

3 

m 

i 

786365476244 

16 

52623967679 

7879 

3 

m 

H 

* 

* 

677250946319 

24 

3 

m 

i 

* 

* 

512068796879 

177 

5 


B 

* 

* 

213265691687 

15 

5 

Q 

B 

775319038196 

5 

75913193999 

175 

5 

Kfl 

i 

573881434136 

107 

48662190359 

4626 

5 

8 

i 

* 

* 

941197327199 

3 

7 

H 

B 

798957687128 

2 

40111506371 

10 

7 

Q 

B 

* 

* 

336699684383 

5 

11 

B 

B 

344379903284 

5 

91355041631 

29 

11 

Q 

i 

* 

* 

935094698711 

2 

13 

H 

B 

* 

* 

366445322799 

2 

13 

Q 

i 

604812537944 

15 

55385334839 

522 

17 

m 

B 

522715590248 

3 

94733724779 

12 

17 

Q 

i 

* 

* 

607531396391 

7 

23 

H 

i 

428918887976 

12 

74447537447 

296 

29 

H 

i 

* 

* 

323459074199 

19 

31 

H 

i 

* 

* 

503905534439 

14 

53 

Q 

i 

313806056276 

24 

34862413351 

200 

59 

H 

i 

278155567784 

6 

65887828631 

81 

61 

B 

i 

388888967156 

6 

148712371111 

62 

67 

H 

i 

323124297044 

3 

131240605511 

28 

73 

Q 

i 

* 

* 

350771311831 

17 

83 

H 

i 

* 

* 

589364144599 

3 

89 

Q 

i 

* 

* 

619130566127 

2 

97 

Q 

i 

* 

* 

438994809599 

2 

101 

H 

i 

* 

* 

981198752759 

1 

223 

i 

i 

229260698804 

17 

36799898071 

49 

227 

i 

i 

248738329160 

17 

129251563279 

43 

241 

i 

i 

275897077784 

13 

74882513855 

33 

251 

i 

i 

274131019432 

7 

78181110431 

24 

263 

i 

i 

482147329592 

7 

37893813311 

31 

269 

i 

i 

241103392196 

4 

11129396567 

22 

271 

i 

i 

291445797352 

5 

171753801031 

18 

277 

i 

i 

266610558308 

6 

128621435167 

18 

281 

i 

i 

644634989492 

2 

266379885935 

13 

293 

i 

i 

874615243688 

3 

158602460567 

17 

307 

i 

i 

749662659128 

3 

149654057447 

13 

311 

i 

i 

666221368184 

4 

111301462879 

8 

313 

i 

i 

416363928728 

3 

303265490831 

14 

331 

i 

i 

158739065384 

3 

388995885319 

7 

337 

i 

i 

506841655124 

2 

283026340679 

6 
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Table 10 - continued from previous page 


p 

ei 

e-i 

First even |A| 

# even A 

First odd A 

# odd A 

349 

1 

1 

804641768168 

1 

32819826815 

5 

353 

1 

1 

839537284648 

2 

305328598259 

9 

359 

1 

1 

* 

* 

627072510479 

4 

373 

1 

1 

* 

* 

215425181891 

5 

379 

1 

1 

* 

* 

356510006687 

4 

383 

1 

1 

878382375224 

1 

137740312007 

6 

397 

1 

1 

* 

* 

434530437127 

2 

409 

1 

1 

* 

* 

594857692087 

1 

421 

1 

1 

* 

* 

422660888879 

4 

431 

1 

1 

* 

* 

567134500223 

3 

433 

1 

1 

* 

* 

791181108079 

h 2 

439 

1 

1 

* 

* 

782761871063 

2 

443 

1 

1 

462953812184 

2 

146805555551 

2 

449 

1 

1 

* 

* 

347760731679 

3 

457 

1 

1 

212262246356 

1 

413877350951 

2 

461 

1 

1 

* 

* 

353455619411 

4 

463 

1 

1 

1047876328724 

1 

679010903567 

1 

467 

1 

1 

683325795752 

1 

817093587359 

1 

503 

1 

1 

* 

* 

544027580079 

1 

521 

1 

1 

969683875304 

1 

363850136623 

1 

577 

1 

1 

* 

* 

733117084823 

1 

719 

1 

1 

* 

* 

737463696271 

1 


Table 11. Non-cyclic rank 3 p-Sylow subgroups 


P 

ei 

ei 

e3 

First even |A| 

# even A 

First odd A 

# odd A 

n 

MM 

B 

m 

341946799364 

2 

20687610651 

11 

B 

MM 

B 

m 

295863285976 

3 

744853350587 

1 

MM 

m 

B 

Bl 

412703787940 

9 

45248632247 

24 

MM 


B 

i 

186447381556 

3 

376544421947 

5 

B 

B 

B 

Bl 

582608055992 

1 

9483757583 

9 

B 

B 

B 

i 

900453600692 

1 

276331426207 

2 

MM 

H 

B 

Bl 

* 

* 

484468933679 

1 

B 

m 

B 

i 

1076743681124 

1 

338926563823 

10 

MM 

8 

B 

i 

276573602516 

12 

59714529551 

139 

B 

MM 

i 

i 

182514096404 

127 

12792023879 

978 

B 

MM 

B 

i 

* 

* 

581116399159 

14 

MM 

Ea 

i 

i 

989021051864 

1 

146114436719 

104 

B 

EH 

i 

i 

* 

* 

797107037711 

1 

B 

D 

B 

i 

204195796664 

3 

116279191211 

7 

MM 

B 

i 

i 

* 

* 

349008665407 

5 

MM 

m 

B 

i 

439240920004 

1 

868770849819 

3 


4 

i 

i 

356820088964 

1 

451900165735 

4 

EH 

B 

i 

i 

889484965924 

2 

145931588651 

9 
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Table 11 - continued from previous page 


p 

ei 

e2 

e3 

First even |A| 

# even A 

First odd A 

# odd A 

13 

1 

1 

1 

218639119912 

11 

38630907167 

20 

17 

1 

1 

1 

* 

* 

824746962451 

2 


Table 12. Non-cyclic rank 4 p-Sylow subgroups 


m 

m 

m 

m. 


First even |A| 

# even A 

First odd |A| 

# odd A 

H 

b 

m 

i 

i 

* 

* 

1074734433547 

1 

m 

EM 

m 

i 

i 

426126877012 

3 

128589208863 

8 

m 


b 

i 

i 

* 

* 

473827747963 

2 

U 

m 

i 

i 

i 

460093393912 

8 

76951070303 

15 

H 

EM 

i 

i 

i 

1047320556596 

1 

513092626699 

2 

o 

B 

i 

i 

i 

* 

* 

226138531999 

2 


Table 13. Doubly non-cyclic class groups 


m 

P2 

First even |A| 

# even A 

First odd A 

# odd A 

■ 1 

83 

411040250696 

8 

50476998239 

69 

m 

89 

271776528392 

14 

146604777199 

29 

WM 

97 

373716927704 

5 

43344787079 

22 

MM 

101 

204919229864 

3 

270845549231 

12 

B 

103 

374301791476 

8 

93069031703 

14 

b 

107 

747657517988 

2 

193384461719 

15 

MM 

109 

379370724596 

5 

35029686023 

17 

b 

127 

761263140536 

1 

127466536019 

10 

B 

131 

* 

* 

248486020319 

2 

B 

137 

* 

* 

373309196719 

4 

B 

139 

* 

* 

261265037799 

3 

B 

149 

* 

* 

555574557467 

4 

B 

157 

* 

* 

258504106919 

2 

B 

163 

* 

* 

288700332223 

5 

B 

191 

* 

* 

778133573263 

1 

B 

193 

* 

* 

4 15837893871 

1 

B 

197 

* 

* 

675588676571 

1 

B 

223 

* 

* 

1044678632711 

1 

B 

47 

337410526616 

16 

8182208159 

78 

B 

53 

375201391636 

8 

22759605719 

28 

B 

59 

842452697976 

2 

166413410411 

20 

B 

61 

621148062232 

2 

198540663599 

14 

B 

67 

952877473160 

1 

202658297511 

13 

B 

79 

* 

* 

695299489415 

4 

B 

83 

* 

* 

255558978287 

5 

B 

97 

* 

* 

957408127639 

1 

B 

107 

* 

* 

895542638663 

1 
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Table 13 - continued from previous page 


Pi 

P2 

First even |A| 

# even A 

First odd A 

# odd A 

7 

37 

220308406520 

5 

49918973471 

36 

7 

43 

395768104936 

1 

57006644887 

18 

7 

47 

611628524996 

2 

98533572251 

12 

7 

53 

819974042456 

1 

532593252151 

6 

7 

59 

* 

* 

746029216663 

3 

7 

61 

* 

* 

530458082031 

2 

7 

79 

* 

* 

1010896284767 

1 

7 

101 

* 

* 

613532171711 

1 

11 

19 

293745669956 

33 

19439678123 

86 

11 

23 

440245788692 

7 

94266055451 

45 

11 

29 

258828614756 

2 

246806029679 

13 

11 

31 

752299766228 

1 

167546860535 

6 

11 

37 

* 

* 

507297592171 

1 

13 

23 

886308340568 

1 

303087341987 

15 

13 

31 

1042065325544 

1 

309693265351 

5 

13 

37 

* 

* 

583833769207 

1 

13 

41 

969016080404 

1 

407911409771 

2 

17 

19 

150334566104 

2 

473841789911 

9 

17 

23 

432363302164 

2 

54134972891 

3 

17 

29 

* 

* 

892052200651 

2 

17 

31 

* 

* 

1035367542059 

1 

19 

23 

* 

* 

659380117199 

1 

19 

29 

* 

* 

915336787039 

1 


Table 14. Trebly non-cyclic class groups 


Pi 

P2 

P3 

First even |A| 

# even A 

First odd A 

# odd A 

3 

5 

17 

278849168408 

19 

60235736039 

63 

3 

5 

23 

703386940456 

3 

148439200263 

14 

3 

5 

29 

* 

* 

300193517399 

5 

3 

5 

31 

* 

* 

323714678543 

5 

3 

5 

37 

* 

* 

999098015071 

1 

3 

7 

23 

* 

* 

805192394183 

1 

5 

7 

11 

* 

* 

656450533751 

6 

5 

7 

13 

786460186856 

1 

110671542299 

3 

5 

7 

17 

* 

* 

658234953151 

1 


7.4. Euler’s Conjecture on Idoneal Numbers. Consider a discriminant A such 
that C7 a is isomorphic to (Z/2Z) z for some l > 0. All such A are related to so- 
called idoneal numbers, which were studied by Euler and Gaufi (see the extensive 
survey on idoneal numbers by Kani [Kan 1 11 1. A positive number D is idoneal if 
every integer n, which is uniquely representable in the form n = x 2 ± Dy 2 with 
gcd(a : 2 ,Dy 2 ) = 1, is either a prime, or a prime power, or twice one of these. Both 
Euler and Gaufi tabulated idoneal numbers, and conjectured that the largest of 
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them does not exceed 1848 [ Gau86( §303]. From the class group perspective, it 
means that A = —5460 is the largest fundamental discriminant such that Cl a — 
(Z/2Z)\ In 1918, the hypothesis of Euler and Gaufi was confirmed by Hecke and 
Landau under the assumption of the ERH |Lanl8| . However, unconditionally this 
problem still remains open, though Weinberger was able to prove that there exists at 
most one idoneal number exceeding 1848 IWei73l . In our computations, we confirm 
that up to 2 40 the largest in its absolute value fundamental discriminant A with 
CIa — (Z/2Z) J is A = —5460. This result agrees with findings of Euler and Gaufi. 
Note that there exists one non-fundamental discriminant, namely A = —7392, 
which is larger than —5460 in its absolute value and has the group structure as 
above. 


8. Further Work 

Our novel approach to class group tabulation has enabled us to extend the fea¬ 
sibility limit. Pushing our methods further would probably require a class number 
tabulation mechanism for A = 1 (mod 8). Presently, no efficient class number 
tabulation formulas are known for this congruence class. One formula that might 
be of interest for future exploration is due to Humbert I Wat 35 i Section 6], who 
discovered that 

oo OO n(n+l) 

(8.26) F ( 8n + = S ~^) J2^ n+1 n 2 q 2 ~ , 

n=0 n=1 ' Q 

where 

CO 

S{q) = ^](-l) n (2n + = 1 - 3q + 5q 3 - 7 q 6 + 9q w - . 

77=0 

Despite its look, the large series on the right hand side of (18.261) does not take long 
to initialize, as it is simple to derive the formula for its n-th coefficient. The main 
problem lies in the computation of S~ 1 (q), which can take a significant amount 
of time, especially if S(q) is of a high degree. Also, the coefficients of S(q) grow 
very fast. For example, its 16-tli coefficient has bit size 10, 64-th - bit size 59, 
and 65536-th fits into 1135 bits. These coefficients have to be somehow truncated, 
for example, by reducing them modulo some prime p, such that F(8n + 7) < p for 
any n < (N — 7)/8. However, this approach also brings certain difficulties, as it 
significantly increases the bit size parameter s. Despite all the obstacles, the usage 
of the formula (18.261) might still be faster than the conditional computation of A = 1 
(mod 8) followed by the verification procedure. We tried to use this approach, and 
in fact our implementation includes a subroutine invert for out-of-core polynomial 
inversion IMosl4bj . This subroutine utilizes a Newton iteration algorithm |GG031 
Algorithm 9.3], which performs the inversion of an arbitrary polynomial to degree 
2" — 1 by sequentially computing its inverse to degrees 3, 7,..., 2 fc — 1,..., 2 n — 1 for 
2 < k < n. Each iteration in this algorithm requires one squaring of a polynomial 
and one polynomial multiplication. Unfortunately, we were unable to produce class 
numbers using this method due to the number of difficulties previously mentioned. 

We also believe that the class group computation can get accelerated by using 
Sutherland’s p-group discrete logarithm algorithms [Su til] . The idea is simple: 
when the class number h{ A) is known, instead of computing all of the potentially 
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non-cyclic subgroups of CIa we compute the structure of each potentially non- 
cyclic p-group separately. Sutherland’s algorithms may be especially useful when 
resolving the structure of a 2-group, as we can precompute its rank by factoring A. 
In some cases, the 2-rank allows us to terminate the 2-group resolution earlier by 
ignoring some of its generators of order 2. 

Finally, we note that the question of unconditional tabulation of class groups 
with positive A is still left open, and is currently work in progress. 
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